Lucene search
+L

746 matches found

Vulnrichment
Vulnrichment
•added 2024/03/20 10:35 a.m.•27 views

CVE-2023-46839 pci: phantom functions assigned to incorrect contexts

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

7.1AI score0.00805EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/20 10:35 a.m.•63 views

CVE-2023-46839 pci: phantom functions assigned to incorrect contexts

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

4.5AI score0.00805EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/03/20 10:35 a.m.•91 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

4.2AI score0.00805EPSS
SaveExploits0
CVE
CVE
•added 2024/03/20 10:35 a.m.•145 views

CVE-2023-46839

The Xen hypervisor (versions 4.17.x and 4.15.x) is vulnerable to an issue where phantom functions on PCI devices can lead to incorrect context assignment. When a device with phantom functions is assigned to a guest, a failure to set up the required IOMMU context does not cause the assignment to f...

4.5AI score0.00805EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•1 views

CVE-2023-46839: Undefined Security Weakness

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS5.8AI score0.00805EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•25 views

openSUSE: Security Advisory for xen (SUSE-SU-2024:0268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score0.00805EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/02/15 12:00 a.m.•39 views

Fedora 39 : xen (2024-e527e6fd08)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e527e6fd08 advisory. arm32: The cache may not be properly cleaned/invalidated take two XSA-447, CVE-2023-46837 pci: phantom functions assigned to incorrect contexts...

3.3CVSS5.2AI score0.00805EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/02/15 12:00 a.m.•40 views

Fedora 38 : xen (2024-4b2cf8c375)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4b2cf8c375 advisory. arm32: The cache may not be properly cleaned/invalidated take two XSA-447, CVE-2023-46837 pci: phantom functions assigned to incorrect contexts...

3.3CVSS5.2AI score0.00805EPSS
SaveExploits0References4
Veracode
Veracode
•added 2024/02/06 4:43 p.m.•28 views

Misassignment Of Phantom Functions

xen is vulnerable to Misassignment of Phantom Functions. The vulnerability is due to the failure to properly handle the assignment of phantom functions when the IOMMU context setup fails. It allows attackers in the primary device being assigned to a guest while some phantom functions are assigned...

5.3CVSS7AI score0.00805EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/06 12:00 a.m.•15 views

The vulnerability of the phantom() function in Xen hypervisors allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the phantom function in Xen hypervisors is related to deficiencies in access control due to incorrect validation of input data during query generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.1CVSS5.9AI score0.00805EPSS
SaveExploits0References11Affected Software4
SUSE CVE
SUSE CVE
•added 2024/01/31 2:55 a.m.•18 views

SUSE CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

4.1CVSS5.4AI score0.00805EPSS
SaveExploits0References10
OSV
OSV
•added 2024/01/30 1:20 p.m.•11 views

SUSE-SU-2024:0270-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts XSA-449 bsc1218851...

5.4AI score0.00805EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/30 1:19 p.m.•10 views

SUSE-SU-2024:0269-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts XSA-449 bsc1218851...

5.4AI score0.00805EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/30 1:19 p.m.•8 views

SUSE-SU-2024:0265-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts XSA-449 bsc1218851...

5.4AI score0.00805EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/30 1:19 p.m.•10 views

SUSE-SU-2024:0264-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts XSA-449 bsc1218851...

5.4AI score0.00805EPSS
SaveExploits0References3
Xen Project
Xen Project
•added 2024/01/30 12:00 p.m.•69 views

pci: phantom functions assigned to incorrect contexts

ISSUE DESCRIPTION PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions nee...

7AI score0.00805EPSS
SaveExploits0
NVD
NVD
•added 2023/12/08 12:15 a.m.•30 views

CVE-2023-6061

Rejected reason: This CVE ID has been rejected/withdrawn by its CVE Numbering Authority Palo Alto Networks based on discussions with Mitsubishi Electronics Corporation's PSIRT...

SaveExploits0
Prion
Prion
•added 2023/12/08 12:15 a.m.•27 views

Design/Logic Flaw

Multiple components of Iconics SCADA Suite are prone to a Phantom DLL loading vulnerability. This issue arises from the applications improperly searching for and loading dynamic link libraries, potentially allowing an attacker to execute malicious code via a DLL with a matching name in an...

4.4CVSS7.5AI score
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/07 11:21 p.m.•76 views

CVE-2023-6061

CVE-2023-6061 is rejected/withdrawn by the CVE Numbering Authority; not an active vulnerability.

7.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2023/12/07 11:21 p.m.•28 views

CVE-2023-6061

...

7.9AI score
SaveExploits0
Rows per page
Query Builder